Win XP group policy is reasonably set to make the system more secure (3)

Control illegal downloading files

When we drive IE to browse the web, we always encounter some good movies and software, and we want to download them. This not only takes up hard disk space, but also brings us system security. many problems. In order to make our system more secure, we need to install a lot of software to shield the download function, which is not only troublesome and bothersome. In fact, Windows XP has already considered these in Group Policy, and also set the corresponding options.

When the IE download function is disabled, expand "Computer Configuration → Administrative Templates → Windows Components → Security Features → Restrict File Download" in the console window, double-click "Internet Explorer" in the right window, and then pop up A settings dialog, click "Enable" at this point to enable this policy setting, which will prevent non-user initiated file download prompts for Internet Explorer processes. After "OK", you can't use IE to download files.

File and Folder Settings Auditing

Windows XP can use auditing to track user accounts, login attempts, system shutdowns or restarts, and similar events used to access files or other objects. If you use Group Policy to audit files and folders, you can ensure their security, and others cannot easily destroy them.

In the Group Policy window, expand Computer Configuration→Windows Settings→Security Settings→Local Policies in the right pane, and then select the Audit Policy option under the branch. Double-click the "Audit Object Access" option in the right pane, and in the "Local Security Policy Settings" window that pops up, check the "Success" and "Fail" check boxes in the "Local Policy Settings" box. Select the mark.

With the above settings, we can make Windows XP system more secure. In fact, we provide users with more security settings in Group Policy. Here we mainly choose several typical settings, other security policies. The setting method will not be described here.